[addtool] additional-scanner-checks

[gwen001]

[tags]scanner,vulnerabilities,burpsuite[/tags] [short_descr]Collection of scanner checks missing in Burp.[/short_descr] [link] https://github.com/PortSwigger/additional-scanner-checks [/link] [long_descr] This burp extension implements some passive scanner checks which are missing in Burp suite:

• DOM-based XSS
• Missing HTTP headers
• Strict-Transport-Security
• X-Content-Type-Options: nosniff
• X-XSS-Protection
• Multiple occurrences of the checked headers
• Redirection from HTTP to HTTPS

All checks can be enabled separately in an own extension tab and a default config can be stored. [/long_descr] [image] https://raw.githubusercontent.com/gwen001/offsectools_www/main/tmp/8466fde6e1ecf7d534422ce5e58a0f8f.png [/image]

[gwen001]

Issue correctly handled, tool is waiting for human validation.

[gwen001]

Tool has been accepted by the team: https://offsec.tools/tool/additional-scanner-checks

Thank you for your contribution!